Collect less. Explain the purpose. Keep it separate.
This notice explains how HaddadStuff handles information submitted through the Business Constraint Finder, optional post-result email choices and privacy requests.
Who is responsible for the information
HaddadStuff is operated by One Spiffy Pty Ltd. The public-facing author identity used on this site is Haddad. This application uses data-minimisation and transparency practices informed by Australian privacy guidance. Where the Privacy Act 1988 and Australian Privacy Principles apply, personal information will be handled consistently with those requirements.
What the Business Constraint Finder collects
The check-in collects structured multiple-choice fields about role category, Australian state or territory category, broad industry, team-size band, desired 90-day result, perceived friction, a matching problem statement, broad tool categories, AI/automation maturity and prior improvement experience. Questions about weekly time and preferred next help are optional.
It does not ask for revenue, profit, business name, domain, phone number, customer records, passwords, financial account details, health information, system access or open-ended business descriptions.
Why the information is used
The answers are used to show an immediate deterministic orientation toward Lead Flow, Operating System, Buy Back Time or mixed signals. Aggregate patterns may also be used to improve HaddadStuff's general research and guidance. The check-in is not used to make an automated legal, tax, financial, employment, privacy or cybersecurity decision about a participant.
Email is optional and separate
No email is required to see a result. After the complete result is visible, a participant may separately choose to receive future aggregate findings and/or register interest in a future HaddadStuff Business Circle. Those choices are unticked by default.
Contact information is stored separately from research answers and linked using a random pseudonymous key. Business Circle interest is only an expression of interest; it does not create a membership or access entitlement.
Privacy requests are separate too
If you need to ask about access, correction or another privacy matter, use the privacy request form. That form asks for an email address so HaddadStuff can respond. A research reference is optional. Privacy-request messages are stored separately from Business Constraint Finder answers.
What is not done with answers
- Answers are not placed in page URLs.
- Answer content is not sent to third-party advertising pixels or analytics properties by this application.
- Answers are not used to train an AI model.
- Individual responses are not published.
- Responses are not shared with or used by other brands.
- The result is not a personalised business, legal, tax, financial, privacy or cybersecurity diagnosis.
Technical records and site analytics
The application research record does not store a participant's full IP address. Hosting, network and security layers may create technical logs needed to operate, secure and troubleshoot the service. Those technical logs are separate from the Business Constraint Finder research record.
For general website measurement, HaddadStuff uses Google Tag Manager and Google Analytics. These services may set analytics cookies such as _ga and receive ordinary website usage information such as the page visited, browser/device information and interaction events under Google's service arrangements. HaddadStuff does not intentionally send Business Constraint Finder answer content, result category, optional email address or deletion code to these third-party analytics properties.
HaddadStuff also keeps simple first-party aggregate usage counts for public page views, Business Constraint Finder starts/completions and public interactive-tool starts/completions. These counters do not use analytics cookies or visitor identifiers and do not store IP addresses, user-agent strings, referrer URLs, questionnaire answers, public interactive-tool inputs or results (including AI Work Triage, Lead Response Leak Check or Owner Time Buyback Check), Business Constraint Finder result categories, email addresses or deletion codes. Counts are grouped by day and known public page so HaddadStuff can understand what is being used without building individual visitor profiles.
Access, correction and deletion
Each successful check-in displays a research reference and a separate deletion code. Those can be used on the self-service deletion page to remove the corresponding research record and any separately linked optional contact record.
Minimal operational audit entries may keep the research reference, event time and action outcome so HaddadStuff can evidence a deletion or security action. Those audit entries do not keep the deleted questionnaire answers or optional email address.
For access, correction or a privacy question that cannot be completed through self-service deletion, use the privacy request form.
How long information is kept
Business Constraint Finder research records are scheduled for review and deletion after 90 days unless a longer period is reasonably required to complete an active analysis, respond to a dispute, maintain security or meet a legal obligation. An audited retention process checks records against that 90-day point. Any exception must use one of those reasons and a stated expiry date; an expired hold no longer prevents deletion. Optional contact records may be kept while the selected purpose remains active or until consent is withdrawn. Privacy-request records are kept only as long as reasonably needed to respond to and evidence the request, subject to security, dispute or legal requirements.
Service providers and overseas handling
HaddadStuff uses Ploi for server management, Vultr infrastructure for cloud hosting, and Google Tag Manager/Google Analytics for general website measurement. The current application server is located in New South Wales, Australia. These providers operate internationally, so account, support, technical or analytics service information may be processed outside Australia under their service arrangements. Business Constraint Finder answer content, result category, optional email address and deletion code are not intentionally sent by this application to third-party advertising pixels or analytics properties.
Aggregate reporting
Any published summary will describe the sample as HaddadStuff participants, show sample size and field dates, disclose recruitment limitations and suppress cells smaller than 10. The check-in is not an official census and is not statistically representative of Australian businesses.
Security and isolation
Research, optional contact and privacy-request records are stored in separate permission-restricted application areas. Administrative access is separately authenticated, transport uses HTTPS, and operator exports/deletions create audit events. The application does not share these records with unrelated brands or services.